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In this paper, we present a model based on relations for bigraphical reactive systems I?]. Its defining 
characteristics are that validity and reaction relations are captured as traces in a multi-set rewriting 
system. The relational model is derived from Milner's graphical definition and directly amenable to 
implementation. 

Introduction 

Milner's bigraphical reactive systems Q, or BRSs in short, are formulated in terms of category theory. 
They encompass earlier models, such as CCS IS, the Ti-calculus ||3l, and Petri nets ||5l. However, as with 
other categorical models, it is not immediately clear how to implement a logical framework that could 
check, for example, the well-formedness or correctness of a BRS, or just execute reaction rules. On the 
other hand there are mature implementations of logical frameworks, e.g. Celf [8] that already provide 
many of the algorithms that one would need for such an implementation. In particular, Celf provides 
support for linearity and concurrency using a kind of structural congruence that arises naturally from 
the definition of equivalence in the type theory CLF [2|. In this paper we show that the two are deeply 
connected. In particular, we formulate a bigraph relational model for BRSs and demonstrate how to 
piggy-bag on Celf's implementation by reusing algorithms, such as unification, type checking, type 
inference, logic programming, and multi-set rewriting. 

A BRS consists of a bigraph and a set of reaction rules. The bigraph consists of a place graph, that 
usually models the hierarchical (physical) structure of the concurrent system to be modeled, and the link 
graph that establishes the communication structure between the different places. By the virtue of this 
definition alone, a bigraph does not have any dynamic properties. It is best understood as a snapshot of 
a concurrent system at a particular point of time. 

What makes a bigraph reactive is the accompanying set of reaction rules. A reaction rule can be 
thought of as a rewrite rule, except that the left and the right hand side are graphs rather than terms. 
Consequently, matching the left hand side of a reaction rule with a subgraph of the current bigraph is 
conceptually and computationally not as straightforward as for example first-order unification. 

As an alternative, we relate bigraphical reactive systems to something that we understand well: uni- 
fication modulo structural congruence in the setting of CLF [9J. CLE is a type theory that conserva- 
tively extends the A -calculus and serves to model truly concurrent systems. CLF follows the standard 
judgements-as-types encoding paradigm, which means that derivations of the validity of a BRS, traces of 
the operational semantics, etc. are encoded as CLF objects of the corresponding CLF type. The extensions 
include, for example, type families that are indexed by objects, a dependent type constructor Ilx : A.B{x) 
as a generalisation of the usual function type constructor, linear type constructors, for example A — o B, 
that capture the nature of resource consumption, and also a monadic type constructor {A}. This type is 
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inhabited by objects of type A, such that two objects are considered (structurally) congruent if and only 
if they differ only in the order in which sub-terms are evaluated. 

The Celf [ 8 ] system is an implementation of CLF type theory that provides a concept of logic variables 
that are logically well understood in terms of linear contextual modal type theory and a rich set of 
algorithms, including a sophisticated unification algorithm, type inference, type checking, and a logical 
programming language that supports both backward chaining proof search and forward chaining multi- 
set rewriting. 

The main contribution of this paper is a model for BRS that we call bigraph relational model that 
follows closely the graphical interpretation of the categorical model proposed by Milner iH. Nodes, 
roots, sites, edges etc. are modelled by multi-sets and the bigraph formation rules as rewrite rules. A 
specific bigraph is valid if and only if the corresponding multi-set can be rewritten to the empty set. We 
also give a direct and elegant encoding of reaction rules as rewrite rules. Furthermore, we prove that 
Celf's operational interpretation of these rules is adequate in the sense that it coincides with the intended 
meaning of those rules. As a consequence, Celf's multi-set rewriting engine implements the reactive 
behaviour of a BRS. 

For illustrative purposes, we choose Milner's bigraph encoding of CCS ||6l as running example, we 
sketch the corresponding bigraph relational model. 

More details are available in the technical report lH and the source code is available from 
[dk/ ~beauquie/brs 

The remainder of this paper is structured as follow: in Section [T] we reiterate the formal definition 
of the bigraph structure. In Section |2] we define reaction rules and therefore BRS. Then, we define the 
bigraph relational model in Section [3} and show that the structures properties of bigraphs are respected. 
Furthermore we define encoding and interpretation functions, and show that the bigraph relational model 
is adequate. We define the encoding of the reaction rules and prove adequacy in Section |4] Finally, we 
show the implementation in Celf in Section [5]bef ore we conclude and assess results. 
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1 Bigraphs 

The definition used in this paper can be found in Q. A bigraph consists of a set of nodes. Each node is 
characterised by a type, which we call control. Each control is defined by a number of ports. We write 
K for the set of controls, and arity : — )• N a map from conti^ols to the number of ports. Together they 
form what we call the signature £ = {K, arity) of a bigraph. The roots of the place graph and the link 
graph, are called roots and outer names, respectively. They form the outer interface of the bigraph. The 
leafs of the place graph and the link graph, are called sites and inner names, respectively. They form the 
inner interface. A site should be thought of as a hole, which can be filled and properly connected with 
another bigraph. More formally we define bigraph as: 

Definition 1 (Bigraph) A bigraph B under a signature £ is defined as 

B = {VB,EB,PB,ctrlB,prntB,linkB) : {m,X) -)> {n,Y), 

where m and n are finite ordinals that respectively refer to the sites and the roots of the bigraph structure. 
X (resp. Y, Vb, Eb) refers to a finite set of inner names (resp. outer names, nodes, edges). Pb represents 
a set of ports. It is defined as 

Pb = {{v,i)\i € arity{ctrlB v)} 

ctrlB : Vb ^ K assigns controls to nodes. The place graph establishes a tree shaped parent ordering 
among all nodes and is defined by prntB : Vg U m — )■ Vg U «. The relation links '■ XUPb ^ EbDY maps 
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Figure 1 : Vending machine example. 

the union of inner names and ports to the union of edges and outer names, which represents the hyper- 
graph called the link graph. 

In this definition, m,n,X,Y,VB, and Eb are all assumed to be disjoint. The functions arity, ctrls, 
prntg , and links cire assumed to be total. 

{m,X) and {n,Y) are called the interfaces of the bigraph, whereby the former is also referred to as 
the inner interface and the latter the outer interface. 

Definition 2 (Ground Bigraph) A bigraph is ground, if its inner interface is empty. The empty bigraph 
(0,0) is denoted by £. 

As a running example we use CCS without replication (!) and new (v) used to model a vending ma- 
chine: c.co I c.co + c.t. Here c represents a coin, co a cup of coffee, and t a cup of tea. The corresponding 
bigraph is presented in Figure [TJ where 

£ = ({get, send, sum}, {(get, 1), (send, 1), (sum,0)}), 

Vb = {a,b,d,e,f,g,h,i,j,l}, 
Eb = ®, 

Pb = {P{h,l),P{e,l),P{g,\),P(i,l),P{jA),P{l,l)}, 

ctrlB = {{a, sum) , {b, send) , {d, sum) ,{e,get), (/, sum) , {g, get ) , 

{h, sum), (/, send), (7, get), (k, sum), (/, send)}, 
prntB = {{a,0),{f,0),{b,a),{d,b),{e,d),{g,f),{h,g),{i,h),{j,f),{k,j),{l,k)}, 
links = {{p(h,i),c),{p(^eA),co),{pi^g^i^,c), (/?(,• i),co), (pq- i),c), 
m = 0,X = 0,?i = 1, and, Y = {c,co,t} 

Milner's encoding of CCS in bigraphs requires a so called activity relation for controls, which we omit 
from this presentation as it can be easily added. 

Bigraphs are closed by composition and juxtaposition, which are defined as follows: 

Definition 3 (Composition) Let F : {k,X) — (m, Y) and G : {m, Y) — )• {n,Z) be two bigraphs under the 
same signature £ with disjoint sets of nodes and edges. The composition GoF is defined as: 

GoF = {V,E,P,ctrl,prnt,link) : {k,X) {n,Z) 
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where: V = Vg^Vf, E = Eq^ Ep, Ctrl = ctrla l±) ctrlp 

{prntf X ifx G A: 1+) Vp and prntp x G Vp 

prntQ j ifx G A: l±) Vp and prntp x = j Em 

prntcx ifxeVc 

and 

{linkp X ifx G X 1+) /V and linkp xE Ep 

linkc y ifx E:X\±iPp and linkp x = y EY 

linkc X ifx G Pg 

Intuitively, prnt(^QoF) is defined as the union of prntc and prntp where each root r of F and each site 
5 of G such that s = r satisfies the following: If prntQ s = y and prntp x = r then prntf^Q^p^ ;c = y for all 
x,y. The definition of link(^QoF) is defined analogously. 

Definition 4 (Juxtaposition) LetF = {Vp,Ep,Pp,ctrlp, prntp, linkp) : {k,X) — > {m,Y) and 

G = {VcEcPcctrlcprntclinkc) '• — > (n,Z) be two bigraphs under the same signature Z that 

as above have disjoint nodes and edges. The juxtaposed bigraph G<SiF is defined as follows. 

G(SiF ={Vp\SVg,Ep\SEg,Pf^ Pcctrlp tt) ctrlc, prntp l±) prnt'^, 
linkp^linkc) : {k + l,X^W) (m + «,Xtt)Z), 

where prnt^ {k + i) =m + j whenever prntc i = j. 

The composition of two bigraphs can be seen as plugging one bigraph structure into the other. The 
juxtaposition on the other hand can be seen as putting two disjoint bigraphs next to each other. 

2 Bigraphical Reactive System 

A BRS consists of a ground bigraph, which is also called the agent and a set of reaction rules. In this 
paper, we discuss two kinds of reaction rules, those that disallow the matching of sites (which are said to 
be ground) and those that do not (which are said to be parametric). 

Definition 5 (Ground Reaction Rule) A ground rewriting rule consists of two ground bigraphs, the 
redex and the reactum, with the same interfaces {L : e ^ J, R : £ ^ J). 

When we apply a ground reaction rule to an agent B, we require that it can be decomposed into 
B = CoL. The result of the application is an agent B' = CoR, which is justified because L and R have 
the same interface. 

Parametric reaction rules differ from ground reaction rules by allowing L and R to contain sites, 
which may move from one to another node, be copied, or simply deleted. To this effect parametric 
reaction rules define a relation r] between sites of the reactum and sites of the redex. Note the particular 
direction of r\ and the link graph inner interfaces of the redex and the reactum are empty. 

Definition 6 (Parametric Reaction Rule) A parametric reaction rule is a triple of two bigraphs and a 
total function from R's sites to L's sites T] 



[L : {m,X) -^J,R : {m',X) -^J, r] :m' ^m) 
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Figure 2: The bigraph encoding for the CCS T-transition rule. 

The semantics of parametric BRS is also based on decomposition of the agent, where an instantiation 
function is deduced from rj to compute the new tails of the bigraph structure. This function is defined up 
to an equivalence. The —-equivalence is defined as follows: 

Definition 7 (Equivalence) Let B and G be two bigraphs with the same interface {k,X) — t- {m,Y). B and 
G are called —-equivalent flean equivalent) if there exist two bijections py : Vg — )■ Vg cind Pe '■ Eb ^ Eg 
that respect the structure, in the following sense: 

• p preserve controls, i.e. ctrlQ opy = ctrlg, and therefore induces a bijection pp : Pf ^ Pq defined 
as Pp (v,0 = {{pv v),i). 

• p commutes with the structural maps as follow: 

prntc o {Idm l±) Py) = {Idn tt) Py) o prnts 
linko o (Idx W pp) = (Jdy tt) Pe) o links- 

Definition 8 (Instantiation) Let F = G o (Jq (8> • • • (8) dm-\) '■ {n,Y) — )• {m,X) be a bigraph where G is a 
link graph, the d's have no inner names and a unary outer face and Tj :m' ^m the relation on sites from 
Definition^ We refer to an instantiation of r\ on F as fj that is defined as follows: 

7iF=Go{d',\\...\\d:„,_,) 

where G m' ,d'j — d^j^ jy Following /[7|/ we write d\\d' for d®d' where d and d' can share edges and 
outer names. 

Let {B,[%) be a BRS, and {L,R,r\) G M the parameterised reaction rule. \f B = C o {D®L) oC then 
we can apply the reaction rule M and rewrite the bigraph B into B' = C o R) o (fj C'). For instance, 
the T-reaction rule the Milner's encoding of CCS in bigraph, {a.P + P') \ {oc.Q + Q') — >^ Q\Pis encoded 
as parametric reaction rule presented in Figure |2j in this case rj = {(0,0), (1,2)}. And using this rule, 
the coffee machin example could reduce in one step in the bigraph represented in Firgure|3] 

3 Bigraph Relational Model 

Next, we tackle the definition of the bigraph relational model that arises form the graphical presentation 
of the categorical model. In our model, bigraphs are identified by name. The disjoint sets of names n, Vb, 
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Figure 3: The CCS term co \ co. 



m, Pb, Y, X, Eb, K are expressed as base relation symbols bigraph, root, node, site, port, o_name, 
i_name, e jname, control. The arity function is encoded as arity, a ternary relation symbol indexed 
by control, a natural number, and a bigraph. And similarly, relations prnts, linkB, ctrls, and Pb are 
encoded by the following operational relation symbols: 

• prnt S D B where S G node U site and D G node U root, 

• link S D B where S G i_name U port and D G o_name U ejname, 

• Ic A K B where A G node and K G control, 

• Ip P A B where P G port and A G node, 

where the symbol B represents the name of the bigraph B and where disjunctive types are encoded as 
relations: 

• prnt.src, with srcjn for nodes and src_s for sites as constructors, 

• prnt.dst, with dst jn for nodes and dst_r for roots, 

• link_src, with src_i for inner names and src_p for ports, 

• link_dst, with dst_o for outer names and dst_e for edges. 
We declare the following structural relation symbols as well: 

• is_root R B where R G root and R belongs to B, 

• isjnode N B where N G node and N belongs to B, 

• is_site S B where S G site and S belongs to B, 

• is_port P B where P G port and P belongs to B, 

• is_ojiame B where G o_naine and belongs to B, 

• is_i Jiame I B where I G i_naine and I belongs to B, 

• is_ejname E B where E G e_nanie and E belongs to B. 

Next, we sketch an algorithm for deciding the validity of a bigraph in the relational model. The 
algorithm is deceptively simple: using the rules depicted in Figure |4} we rewrite the encoding of a 
bigraph to the empty set by checking the validity of the place graph and the link graph and the valid use 
of control's arity. As we will show below, the algorithm is confluent and strongly normalising. The rules 
are partially sequentialised in such a way that children are rewritten before the parents and nodes before 
ports. We make this information explicit and define three more operational relational symbols one for 
the place graph, an other one for the link graph, and one for the control's arity. 



20 



A Bigraph Relational Model 



base cases 

{is_root R, has_child_p (dst_r R) z}l±)Ai-^A (dr) 
{is_o_name 0, has_child_l (dst_o 0) z}l±)Ai-^A (do) 
{is_e_name E, has_child_l (dst_e E) z}l±)A,i-^A (de) 
recursive cases 

{is.port P, Ip P A, vp A (s z) , link (src_p P) D, (Igpsz) 

has_child_l D (s N)} l±) A i-^ {has_child_l D N}l±)A 
{is_i_name I, link (src_i I) D, has_child_l D (s N)} (Igi) 

l±)Ai-^ {has_child_l D N}l±)A 
{is.site S, prnt (src_s S) D, has_child_p D (s N)}l±)A (Igs) 

1-^ {has_child_p D N}l±)A 
{isjiode A, has_child_p (dstJi A) z, prnt (src_n A) D, (pgnz) 

has_child_p D (s N) , Ic A K} tt) A i-> {has_child_p D N}l±)A if arity K = 

{isjiode A, has_child_p (dstJi A) z, prnt (src_n A) D, (pgns) 

has_child_p D (s N) , Ic A K}l±)A 

i-> {has_child_p D N, vp A N'}l±)A if arity K = N' > 

{is.port P, Ip PA, vp A (s (s N')), (Igps) 

link (src_p P) D, has_child_l D (s N)}l±)A 

i-^{vp A (s N'), has_child_l D N}l±)A 



Figure 4: Bigraph Validity 



• has_child_p D N B where D S node U root, N a natural number, and B a bigraph name. 

• has_child_l D N B where D G e_name U o_name, N a natural number, and B a bigraph name. 

• vp A N B where A G node, N a natural number, and B a bigraph name. 

The encoding of bigraph B is now straightforward. It is defined as the multi-set S = [Bj in Figure [5] 
For reasons of convenience, we omit bigraph names from relations, and we use uppercase characters 

for logic variables in rewrite rules. Furthermore we use lower case z and s for zero and successor. 

We show that the rewriting system is strongly normalising and implements a decision procedure for 

checking the validity of bigraphs. 

Lemma 1 (SN) This multi-set rewriting system is strongly normalising for any finite multi-set S. 
Proof 1 By a trivial induction of the size of the set S. 

In the following we write S — 5" for transitive closure of i— )■ from Figure |4] We say S is valid if and 
only if S — > 0, S contains only unique elements and operational symbols has_child_p, has_child_l 
and vp are unique on their first argument, respectively node U root, o_name U e_nanie and port. 
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[Bj = y (is Jiode a; l+l Ic a,- {ctrls fl,) W prnt a,- {prntB at) 
' 1+) has_child_p a,- | prnts y — a,}|) 

\EB\-i \Y\-l 

l+J (is_e jname l+l |+J (is_ojname 

(=0 i=0 

[+J (is_port c; l+l Ip c; (;ri c,) 
' " l+l link c; {links C;)) 

m— 1 

l+J (is_site di l+l prnt c/,- {prnts di)) 
1=0 

|x|-i 

l+J (is_i_name e,- l+l prnt e,- {prntg e,)) 

!=0 

n-l 

l+J (has_child_p \{y \ prntsy^ /,}| 
ttl is_root /,j 



Figure 5: Encoding function from a bigraph structure. 

Example 1 T/je bigraph Bfrom Figure^ is represented as follows: 
lB\ = {is^root B, has^child^p (s (s z)) B 



is. 


_node 


a 


B, 


Ic 


a 


get B, has_child_p a (s z) 


B, 


is. 


_node 


h 


B, 


Ic 


h 


send B, has_child_p b (sz) 


B, 


is. 


.node 


d 


B, 


Ic 


d 


sum B, has-child-p d (s z) 


B, 


is 


_node 


e 


B, 


Ic 


e 


get B, has^chidl^p e z B, 




is. 


_node 


f 


B, 


Ic 


f 


sum B, has_child_p f (s (s 


z)) B, 


is. 


_node 


9 


B, 


Ic 


9 


get B, has_child_p g (s z), 




is. 


.node 


h 


B, 


Ic 


h 


sum B, has-child-p h (s z) 


B, 


is 


_node 


i 


B, 


Ic 


i 


send B, has^child^i g z, 




is. 


_node 


j 


B, 


Ic 


j 


get B, has_child_p d (s z) 


B, 


is. 


_node 


k 


B, 


Ic 


k 


sum B, has_chidl_p k z B, 




is 


_node 


I 


B, 


Ic 


I 


send B, has-Child_p I z B, 




is 


_port 


P(b,i) 


B, 


P(b,\) b B, is^port p^,,y^ B, 


Ip P(e,\) e B, 


is 


_port 




B, 


P{g,l) 9 B, is^port pi^i i) B, 


IP P{i.i) i B, 


is 


_port 


Pij-i) 


B, 


T-P P{j.l) B, is^port p(, j) B, 


IP P(l,l) 1 B, 



is^o^name c B, has^child^l c (s (s (s z))) B, 
is^o^name co B, has^child^l co (s (s z)) B, 
is_o_name t B, has_child_l t (s z) B, 

prnt a B, prnt f B, prnt b a B, prnt d b B, prnt e d B, prnt g f B, 
prnt h g B, prnt i h B, prnt j f B,prnt k j B, prnt I k B, 
link c B, link P{e.i) c B, link P{i,,\) c B, 

link P(i^i) CO B, link py^i) co B, link P[iX) * B} 
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' {VB,EB,PB,prntB, ctrls, links) ■ {m,X) {n,Y) 

under the signature {K, arity) if S — 0. 

undefined otherwise. 



where for some B bigraph name 

^ = {)t| VAanode,lc k A B£S}, 

arity = {{k,n) \y A a node, vp A n Bg5A1c A k B G 5}, 

Vic A k BeSA^3n',vp A n Bg5'A?i = 0} 
Vb = {v I is_node v B G 5}, Eb = {e \ is_e_name e B € 5} 
Eb = {(v, I is_port (v, /) B G S}, prnts = {{x,y) \ prnt xy B £ S} 
ctrls = {(v,^) I Ic vk B G 5}, links = {{^^y) I link xy B G 5} 
m = {r\ is_root r B G 5}, X = {x | is_i_name B G 5} 
n = {s \ is_site s B G S}, 7 = | is_ojiaine j B G S} 

Figure 6: Interpretation function. 

Lemma 2 Let S be valid. Then the relations in S defined by the operational symbols are total, acyclic, 
and single valued. 

Lemma 3 Let S be valid. 

• G node U root, VA^ a natural number, has_child_p y M G 5 implies \ {x \ prntxy G 5}| = 

• Wy £ edge U o jiiaiCie,\fN a natural number, haLS_child_l y H £ S implies \{x\liiikxy £ S}\=N 

• Vv G node, VA'^ a natural number, vp v N G 5 implies | {a; | Ip x v G 5} | = A'^. 

The proofs of Lemma[2]and|3]rely on the definition of multi-set rewriting consuming elements of the 
multi-set. 

Lemma 4 (Normal Form) Let S be valid. Then is the unique normal form ofS with respect to — >. 

Proof 2 Since strong normalisation has already been proven in Lemma |7] we prove local confluence in 
order to apply the Newman 's lemma. The critical pairs that respect the hypothesis are either trivial or 
join-able in one step. 

By induction over the rewrite trace, we can easily convince ourselves that valid S holds if and only if 
S encodes a bigraph. 

Theorem 1 (Inversion) IfS is valid then there exists a bigraph B, s.t. \B\ = S. 

Proof 3 Lemma^and^ensure that the set holds the properties of the graphical definition of a bigraph. 

This theorem guarantees that the encoding as defined in Figure|5]has an inverse (which is only defined 
on valid sets). It is defined in Figure [6] and for which we write \SY- Furthermore, we have shown that 
there exists a bijection between bigraphs and their representations as valid multi-sets. 
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Theorem 2 (Adequacy) Let B be a bigraph under a signature E = {K,arity), then [[Sj] * — B. 

Next, we show that composition and juxtaposition of bigraphs are provided "for free" in the bigraph 
relational model. They basically correspond to multi-set union. 

Let C be a bigraph. Next, we partition [C] into three parts, C tt) outc tt) iuc where 

1. outc contains only references to roots is_root, outer names is_o_naiiie, place graph parent rela- 
tions prnt on roots and link graph parent relations link on outer names, 

2. inc contains only references to sites i site, inner names is i Jiame, place graph parent relations 
prnt on sites and link graph parent relations link on inner names, 

3. and C = [Cj \ outc \ i^c- 

Also, let S be a bigraph such that S = C o C' for two bigraphs, C and C' . We define the set eqcc as 
follows : 

e^cc/ ={prnt x y | is_root r G [C']] A is_site s G [Cj 

A I s 1 = 1 r I Aprnt x r G [C']] Aprnt s y G [Cj} 
U{link X y | is_ijiaiiie i G \C\ A is_o_naiiie o G \C'\ 
A I i 1 = 1 o I A link i y G [C] A link x o G {C'}} 

Note, that eqcc is built from outc and inc. 

Lemma 5 Let B be a bigraph. IfB = CoC' then \B\ = outc U C U eqcc U C U inc. 

Lemma 6 LetB be a bigraph. IfB = C®C' then [Si = C U C' U outc U inc U outc U inc = [[C| U [C'l 

The proofs of these lemmas are direct, using the definitions of composition and juxtaposition, in 
particular, the disjointness property of C and C' . 

4 Modelling Reaction Rules 

In this section, we illustrate how we model reaction rules. 
4.1 Ground Reaction Rule 

Recall that applying a ground reaction rule {L,R) to an agent B proceeds by decomposing B into CoL 
for some bigraph C and then replacing L by R. Therefore, in the model, we only need to partition the 
agent \B\ into two sets with respect to C, one that is affected by the reaction rule (here L U eqcL) and 
the other that is not. 

[CoLj = outc U C U eqcL U L [C o /?]] = outc UC U eqcR U R 

For a given bigraph C, we can think of a ground reaction rule as a multi-set rewrite rule that replaces 
among other things the set eqcL by eqcR'. 

L U eqcL ^ /? U eqcR 

We can rid this rule of the dependency on C. We know, first, that the inner interface of C must be 
the same as the outer interface of L (and therefore also R). Second, the components in the interface 
that depend on C are only roots and outer names. Therefore, instead of quantifying over C, we can 
reformulate the rule by simply quantifying over the aforementioned components. 
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4.2 Parametric Reaction Rule 

The parametric reaction rule from Definition [6] is a triple that consists of two bigraphs, and a function rj 
that maps sites from the reactum to sites in the redex. 

A parametric reaction rule is applied to an agent B if B can be decomposed into Co{D®L)oC' where 
C, D and C' are bigraphs and L is the redex. The result of the application is the agent C o (^D R) o (rj C') 
where 77 is defined in Definition [8] The basic idea is essentially the same as in the ground case, therefore 
we proceed analogously and model decomposition by partition 

[Co (D®L) oC'j = outc U C U eqc((D»L)oC') U ((D(»L) oC) U egtc 

U C U /?l((Z)^L)oC') 

= outc U C U eqc({D0L)oC') U L U D U eqoa U egtc U C' 
and model parametric reaction rule as a multi-set rewriting rule. 

eqc({D®L)oC) U L U D U eqoc' U eqw U C 

^ eqc{{D®R)o{i]a)) U RU D U equiT^c) U eqiijja) U (jj C) 

Differently from above, the formulation of the rule is not only dependent on C, but also on C'. This 
time, however things are not as direct, in part because the inner interfaces of the redex and the reactum do 
not match. In Definition |6j we use rj to coerce one to the other, which means that the interfaces between 
(tj C') and R actually do match. 

Applying fj to C' is algorithmically simple: on the place graph, the operation recursively deletes all 
sites that are not in the range of T] , moves all sites that have a unique image under T] , or copies all sites 
that do not have a unique image under T] ; on the link graph, it only administers links from and to ports (as 
proposed in |7|). The computational essence of these operations is captured in terms of a few multi-set 
rewriting rules, that iterates over the place graph, which we discuss in more detail in Section|5] 

4.3 Meta Theory 

We show that modelling ground and the parametric reduction rules as rewrite rules is sound and complete. 

Theorem 3 (Soundness) Let B,B' be agents, ^ a set of reaction rules and {L,R,ri) G ^. If B can be 
rewritten into B' by L,R, T] and W >-^Z is the corresponding rewriting system, then the following diagram 
commutes: 

(LR.ri) 

B > B' 

H H 

m > iB'i 

Proof 4 Ground reaction rule. L and R are ground and the graph of rj is empty. B = CoL and B' = CoR, 
by Lemma^^nd because interfaces of L and R are the same, [Bj = C U L U outc U "^t U ^ICL cmd 
\B''\ = C U /? U outc U int U eqcR, therefore \B''\ is the result of one step of the multi-rewriting system 
L U eqcL R U eqcR applied on \B\. Parametric reaction rule. Analogous. 
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Conversely, all multi-set rewriting system that encode a ground reaction rule respects the semantics 
of ground BRS. 

Theorem 4 (Completeness) LetX, Y be valid sets. Furthermore letW be sets such that there exists 
an {L,R,ri) that is a reaction rule that can be applied on \X\* and W is the modeled reaction rule 
of {L,R,ri), then the following diagram commutes: 

X > ¥ 

i-r ir 

J- (L,R,7J) -L 

[xf ^ m* 

Proof 5 Ground reaction rule. Using Lemma^and Theorem^ L U eqxL £ X implies that pC}* = CoL. 
Therefore R U eqxR G X implies that [Fj* = Co/?. Parametric reaction rule. Analogously. 

5 Implementation in Celf 

We turn now to the original motivation of this work and evaluate the bigraph relational model empirically. 
The very nature of the rules depicted in Figure[4]suggests a language based on multi-set rewriting, such as 
Maude, Elan, AProlog, CHR, or Celf. Because of Celf 's features, in particular linearity and higher-order 
abstract syntax, we have decided to use Celf as our implementation platform. 

And indeed, the implementation of the bigraph relational model is straightforward. Roots, nodes, 
sites, etc., are encoded using Celf 's intuitionistic features, and the evidence that something is a root, a 
parent, or a port is captured by linear assumptions using dependent types. Consequently a bigraph is 
represented by the Celf context. The multi-set rewriting rules as depicted in Figure [4] and the reaction 
rules from Section |4] are encoded using linear types and the concurrency modality. For example, the 
rewrite rule 

{is_root R, has_child_p (dst_r R) z}l±)Ah-^A 

is implemented in Celf as a constant 

dr : is_root R B * has_child_p (dst_r R) z B -o {1}. 

where is_root carries a reference to the bigraph it is a root for, and all uppercase variables are implicitly 
n quantified. Celf provides a sophisticated type inference algorithm that infers all omitted types (or 
terminates with an error if those cannot be found). 

Celf also comes with a forward directed logic programming engine in the style of LoUimon [4 1, which 
resembles the CHR evaluation engine. During operation, the uppercase variable names are replaced 
by logic variables, which are subsequently instantiated by unification if the rule is applied. Note that 
the properties of the encoded bigraph reactive system are preserved: If the reaction rules are strongly 
normalising then so is their encoding. As an illustration of our experiments we depict an encoding of 
bigraph validity (see Figure[3]l as a type family valid and a few Celf declarations in Figure|5] Note how 
similar the two figures are. 

The higher-order nature of Celf allows us to express rewriting rules that dynamically introduce new 
rewriting rules on the fly. In Celf, rewriting rules are first-class citizens. The logical principle behind this 
technique is called embedded implications. By nesting them we achieve elegant encodings. 
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7,°/o base cases 

dr : is_root R B * has_child_p (dst_r R) z B -o {1}. 

do : is_o_name OB* has_child_l (dst_o 0) z B -o {1}. 

de : is_e_name E B * has_child_l (dst_e E) z B -o {1}. 

7a7, recursive cases 

Igpsz : is_port P Bi * Ip P A Bi * vp A (s z) Bi * link (src_p P) D Bi 

* has_child_l D (s N) Bi -o {has_cliild_l D N Bi}. 
Igi : is_i_name I Bi * link (src_i I) D Bi 

* has_child_l D (s N) Bi -o {has_cliild_l D N Bi}. 

pgs : is_site S Bi * prnt (src_s S) D Bi * has_child_p D (s N) Bi 

-o -Chas.child.p D N Bi }. 
pgnz : is_node A Bi * has_child_p (dst_n A) z Bi * prnt (src_n A) D Bi 

* has_child_p D (s N) Bi * Ic A K Bi -o arity K z -> {lias_cliild_p D N Bi}. 
pgns : is_node A Bi * has_cliild_p (dst_n A) z Bi * prnt (src_n A) D Bi 

* has_child_p D (s N) Bi * Ic A K Bi -o arity K (s N') 
-> {has_child_p D N Bi * vp A (s N' ) Bi}. 

Igps : is_port P Bi * Ip P A Bi * vp A (s (s N)) Bi 

* link (src_p P) D Bi * lias_cliild_l D (s N') Bi 
-o {vp A (s N) Bi * has_child_l D N' Bi}. 

Figure 7: The implementation of the valid relation in Celf. 

An example is the encoding of a parametric bigraph reaction rule {L,R, fj). The definition of the Celf 
signature is rather involved, where we use linearity and token system ([[0,0]]) in order to sequentialise the 
reaction rule. Below we give an algorithm that computes the Celf declaration 

rulet^LM.m ■■ I(m,T])l«) (1(0,0)1 ^ {L^eqxL ^ {R(S)eqxR)}}) 

from the sites m in L and Tjj^ Recall the three auxiliary operations delete, move, and copy that are 
triggered depending on the cardinality c = \{x \ x & m,{x,y) ^ r]}\. In the case that is c = 0, we first 
colour all the direct children of node pmti x (using tmp) that contain the site x with colour tmp_prnt. 
Second we remove the colour information from all of siblings of x that are also present in L. Third, for 
each coloured node, we start a recursive descent phase (using del) to trigger the deletion of the node and 
its children. 

lx(im,{x,y)(^r]\ = 

has_child_p {prnttx) {s^ N)®tmp (prnti x) {s'' N) 

k 

(8) (tmp [prnt I x) z ^ {(^tmp_prnt 5, D,- 

(=0 

k 

^ {(^prnt 5,- D,- (8) del [prnt i x) N ® {del {prntix)^. 

i=0 

^{has_child_p {prnttx) (s^z) ]]m \ {x}, T]]]})}}) 

In the case that c = 1 , we do something very similar as in the previous case, except that we move instead 
'in the interest of clarity, we omit all references to the bigraph identifiers from Celf type constructors. 
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of delete. This case is conceptually easier because we can skip the recursive descent phase. 

lx£m,{x,y) erij = 

has_child_p {prnta y) (s'^ N) f^tiapjmove {prntix) {s^ N) 
(g) (tmpjnove (prnti x) z ^ {move {prnti x) {prntR x) N 
(move {prnti x) {prntR x) z 
{has_child_p {prntRj) {s'' 2.)®lm\{x},^\{{x,y)}],})}) 

The case that c > 1 is again similar, except that this time we need to recursively copy the graph rooted 
in prnti x. While copying we are forced to create new nodes, ports, etc., which we get for free from the 
Exists connective that is part of Celf. 

lxem,{x,y) G T]l = 

has_child_p {prntR x) {s^ N)(^ tmp.copy {prnti ^) (s'^ A'^) 

k 

<8) (tmp.copy {prnti x) z ^ {(^tmp.prnt Si D,- 

(=0 

k 

{(^prnt Si Di (g) copy {prnti x) {prntR y) N 

(g) (copy {prnti x) {prntR y) z 

-o {has_child_p {prntRx) {s'' N) 0lm,ri\{{x,y)}j})}}) 

In the base case, we define [0,0]] as a Celf type constructor. Note that some cases, in particular move and 
copy, need additional rules when the source node and the destination node are the same. This definition 
is well-formed because during the recursive calls either, m, T] , or both get smaller. 

Finally, we address the question of adequacy. Let (B,^) be a BRS, and F the intuitionistic Celf 
context that contains the names of all ports, sites, roots, inner names, outer names, edges, nodes, controls, 
the graph of the arity function in B, and the translation of all reaction rules declared in 

Theorem 5 (Adequacy) The agent B reduces to agent B' using the rules in if and only if (in Celfj 
nF.(g)]]Bl {C} implies that VlY .%\B\ {C}. 

Proof 6 By induction on the reduction sequence, using the definition o/j](m,T7)]] and Theorems^ |4] 

Conclusion 

In this paper we have described a model for bigraph reactive systems, which we refer to as the bigraph 
relational model. We have shown that this model that is based on a multi-set rewriting system is amenable 
to implementation. The rewriting system ensures the validity of the encoding with respect to the bigraph 
structural properties, and we have shown that the semantics of BRS is precisely captured by the multi-set 
rewriting rules. Finally, we give an implementation of the bigraph relational model in Celf, which is 
powerful tool: Linearity allows us to implement the reaction rules directly, its higher-order features take 
care of dynamic introduction of new rewrite rules and the creation of fresh names while copying the 
place graph where warranted. 
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